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FIG.3 



COUNTING PHASE 



Step 1 



Randomizer, !M, decrypts list 

of c, to yield (jc, ar >d 
changes order of list 



Step 2 




Tallier, I^M, checks re- 
ordered list of (jc/jv) : 
any duplicate entries? 



YES 



Go to A 
in Fig.4 



NO 



Step 3 



Tallier, TlM, checks digital 

signatures j,- : 
any invalid ? 



YES 



Go to A 
in Fig.4 



NO 



Step 4 



Tallier, TM, compares 
list, L, of (x/jv) with 
revocation list H£, 



Step 5 
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NO 
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SJCjm used to decrypt x t to 
yield votes, v, 


/ 


f 



YES 



Go to A 
in Fig.4 



Step 6 



Tallier, TM, counts votes 
and publishes the result of 
the voting process 



4/5 



DISCREPANCY-TRACING: 
CHEATING MIX-SERVER, Mj 



0 



For each queried pair 

prompt mix-servers, M, 
to generate zero- 
knowledge proofs of 
correctness. 

Satisfactory proofs for all 
M } 1 



NO 



Disqualify Mj for which no 
satisfactory proof 



YES ^ Go to B 
In Fig.5 



All SJC„ revealed, 
Ci decrypted using SJC 
to yield (x^d 



Tallier, T5w, decrypts + 

randomly permutes (jc,-j>/), 

giving proofs of 
correctness, to yield votes, 



Tallier, counts 
votes and publishes the 
result of the voting 
process 
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FIG.5 



DISCREPANCY-TRACING: 
CHEATING VOTER 



0 



For each queried pair (x;jv) fff 

use back-tracing algorithm 
of mix-net, with {x h yj) q as input, 

to yield Id/y, 
of voter who sent to BB 
(cij, oij) corresponding to {x it yd g 



Apply 7?EVj (signature- 
tracing mechanism of the 

fair blind signature 
scheme) to retrieve (jr,yj; f y) 
corresponding to 
Id/a 



Add (x ijf yy) to 
revocation list, KL 



Remove {x ji y j ) q from list, 
L, of ballots to be 
counted 



T 



Go to C 
In Fig.3 



